Privacy policy

The short version

We collect what we need to get a card from our drawer to your door, we share it only with the people who make that happen, and we never sell it to anyone. This policy explains the detail. We are an Australian business, and we handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

What we collect

When you place an order we collect your name, delivery address, email address and, where you provide it, your phone number, along with the details of what you bought. Payment details go directly to our payment processors — we never see or store your full card number.

When you browse the store, Shopify — the platform our store runs on — collects the usual technical information: IP address, browser and device details, and the pages you visit, through cookies and similar technologies. This keeps the cart working and helps us understand how the store is used.

If you join our email list, we collect your email address. If you write to us, we keep the correspondence.

How we use it

We use your information to process and post your orders, send you order and tracking confirmations, answer your questions, resolve problems under our refund policy, and meet our tax and record-keeping obligations. If you have opted in, we will occasionally email you about new drops — every one of those emails has an unsubscribe link, and unsubscribing takes one click and is honoured immediately.

We do not sell, rent or trade your personal information. We do not send marketing on behalf of anyone else.

Who we share it with

Only the services that make the store work: Shopify, which hosts the store and processes orders; our payment providers, who handle your payment; and Australia Post, who need your name and address to deliver your parcel. Each of these handles your information under its own privacy policy. We may also disclose information where the law requires it.

Some of these providers, including Shopify, store data on servers outside Australia. Where that happens, your information is held under the provider's own safeguards and privacy commitments.

Cookies

The store uses cookies to keep your cart together, remember your region, and measure how the site is used. You can block cookies in your browser, though the cart will not work without the essential ones.

How long we keep it

Order records are kept for as long as Australian tax law requires — currently at least five years. Email correspondence is kept while it is useful for looking after you, particularly under our authenticity guarantee, which has no time limit. Mailing-list details are kept until you unsubscribe.

Keeping it safe

The store runs over an encrypted connection, payments are handled by PCI-compliant processors, and access to order information is limited to the two of us. No system is perfect, but we treat your details the way we treat the cards — carefully.

Access and correction

You are welcome to ask what personal information we hold about you, ask us to correct it, or ask us to delete what we are not legally required to keep. Write to enquiries@mementotradingco.com.au and we will respond within 30 days.

Complaints

If you believe we have mishandled your personal information, write to resolutions@mementotradingco.com.au and we will do our best to put it right. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.